Senior DevSecOps Engineer – Vulnerability & Fleet Management

About the role

Sumsub is looking for a Senior DevSecOps Engineer to own and evolve its Vulnerability Management and Fleet Security capabilities. You will design, build and operate automated security controls across cloud and infrastructure, turning manual processes into a self‑service platform for internal teams.

Key responsibilities

• Design and run scanning pipelines for infrastructure and containers (Nessus, Trivy or equivalents), handling CVE correlation, asset ownership mapping and remediation SLAs.
• Manage fleet inventory and policy coverage using tools such as osquery or FleetDM, and monitor configuration drift.
• Develop smart noise‑reduction logic that ties vulnerabilities to business criticality and exploitability (CVSS/EPSS) and automate lifecycle operations.
• Build self‑service security products – APIs, dashboards and ChatOps/Slack integrations – for platform and engineering teams.
• Define machine‑checkable security standards and generate audit‑ready compliance evidence automatically.
• Collaborate with SOC, Infrastructure and Platform teams to validate controls in production while preserving developer experience.

Required profile

• Platform‑engineer mindset focused on developer experience and automated prevention.
• Hands‑on experience with program‑level infrastructure scanning (Nessus, Qualys, Tenable) and container image security (Trivy or similar).
• Proven track record with fleet inventory systems (osquery, FleetDM) and cloud platforms (AWS preferred) in Kubernetes environments.
• Strong scripting skills in Python, Go or Bash and experience building custom APIs or dashboards.
• Deep understanding of CVEs, CVSS/EPSS scoring and remediation workflows, with practical judgment for production realities.

Required skills

• Nessus
• Qualys
• Tenable
• Trivy
• osquery
• FleetDM
• AWS
• Kubernetes
• Python
• Go
• Bash
• GitLab CI
• GitHub Actions
• Kyverno
• OPA

What we offer

• Remote‑first, trust‑based culture with full flexibility on working hours.
• Extra time off including birthday holiday, 10 personal days, sick days without paperwork and extended holiday periods.
• Mission‑driven work that impacts fraud prevention and online trust globally.
• Fair, market‑benchmarked compensation.
• Global team across continents with opportunities to work on cross‑border projects.
• Clear career growth, personal development plans and support for learning events.
• Financial bonuses for major life events such as marriage or new baby.
• Fully covered team off‑sites and provision of necessary tools and hardware.